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What is claimed is: 




An electronic data management system which comprises a controller for 
executing a program stored in a mei lory while being connected to an input device for 
data input, storage units, and a data reader for reading data stored in a first recording 
medium, wherein 

5 said storage units comprise a first storage unit which stores an electronic data record 

file including electronic data, and a second storage unit which stores a log file including 
log data representing input or update log of the electronic data recorded on said electronic 
data record file, 

said input device inputs electronic data to be recorded on said electronic data record 
1 0 file, and update data to update the recorded electronic data, 

said controller executes the program stored in said memory to: 
store log of the electronic data input from said input device in the log file; 
store the electronic data input from said input device in the electronic data record 

file; 

1 5 control said data reader to determine whether said first recording medium being 

accessed by said data reader is certified medium or not; 

determine whether said system is operated by a certified operator based on 
externally given information; 

allow the operator to inpu^t the update data through said input device to update the 
20 electronic data in the electronic data record file when said first recording medium and the 
operator are certified; 

update the electronic data in the electronic data record file in accordance with the 
update data input by said input device; and 

store log of the update Idata input by the input device in the log file. 

The system acco^ing to claim 1, wherein said second storage unit is 
defachably connected to spd system. 
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3. The system according to claim 1, wherein said first recording medium is 
detachably connected to said data reader. 

The system according to claim 1, wherein, 
said first recording medium stores predetermined encryption keys, and 
said system furthe^omprises a medium verification unit which stores 
predetermined encryption keys, collaborates with said data reader to perform medium 
verification by/tfie challenge-response with using the own encryption key and the 
encryption key read from said first recording medium, and informs said controller of the 
verification results. 

The system according to claim 1, wherein said controller encrypts the log of 
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encrypted log of the input e 




the electronic data input fey said input device with the predetermined encryption key, and 
stores the encrypted data in the log file. 

(5. The system accc rding to claim 5, wherein said controller decodes the 

ectronic data stored in the log file with using a predetermined 
decode key when said contn >ller certifies said first recording medium and the operator, 
and 

said system further coiiprises an output device which outputs the log of the input 
electronic data decoded by s jid controller. 

\jf The system according to clainaf 6, wherein said input device inputs the update 
da#k in accordance with the log of th^input electronic data output by said output device. 

8. The system according to claim 1, wherein said input device also inputs 
verification information representing an operator who inputs the electronic data or the 
update data, and 

said controlled associates the verification information input by said input device with 
the input or undated electronic data before storing the electronic data in the electronic 
data recor^rile. 

The system accordirifestdiGlaim 1, wherein said storage units further comprise 
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a third storage unit which stores a physical characteristic data file including data 

representing physical characteristics of thp^dertified operator, and 

said system further^omprise^a data input device which inputs data representing the 

operator's physical cham6teMtics, and a user verification unit which compares the 

physical characteristic data input by said data input device with the physical characteristic 

data stored in the physical characteristic data file, and determines whether the operator is 

the certified operator or not based on the comparison results. 

v 10/ The system according tq claim 9, wherein said first recording medium further 
V / 1 

stores data relating to the physical Characteristics of the certified operator, and 
/ said user verification unit compares the physical characteristic data input by the data 
input device with the physical characteristic data stored in said first recording medium, 
and determines whether the operator is the certified operator or not based on the 
comparison results. 

11. The system according to claim 9, wherein said controller acts as said user 
verification unit by executing a/program stored in said memory. 

12. The system according to claim 1, wherein said controller stores the electronic 
data stored by said input devicje in the electronic data record file immediately after the 
data input. 

13. The system accoyiing to claim 1, wherein said controller stores the electronic 
data in the electronic data record file based on the log of the electronic data stored in the 
log file when said controller [certifies said first recording medium and the operator. 

14. The system according to claim 1 further comprising a second data reader 



which reads data stored in 



a' detachable second recording medium, wherein 



said controller allows said input device to input the electronic data when said 
controller certifies said sec md recording medium based on the data read by said second 
data reader. 

The system according to claim 1, wherein the electronic data record file stores 
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electronic account data, and 

the electronic data and the update data include information regarding to dealings and 
information for updating the dealing information to be recorded on the electronic account. 

16. An electronic data management system comprising: 

data input means for inputting electronic data; 

electronic data recording means for recording information input by said data input 
means; 

medium verification means for verifying a detachable recording medium when said 
recording medium is applied to said medium verification means; 

user verification means for determining whether an operator is a certified one or not; 

access authorizationuneans for authorizing input of update data for updating the 
electronic data recorded on said electronic data recording means, when said medium 
verification means verifies §aid recording medium and said user verification means 
verifies the operator; 

update data input mean^for inputting the update data when said access authorization 
means authorizes input of the update data; 

data update means for updating the electronic data stored in said electronic data 
recording means in accordance \{/ith the update data input by said update data input 
means; and 

log management means for Recording log of the electronic data input by said data 
input means and log of the update qata input by said update data input means. 



17/ The system according to claim 16 farther comprising electronic data output 
^Hjean? for outputting the log of the electronic data recorded on said log management 
m^dns when said access authorization^neans authorizes the update data input, 

wherein said update data input means inputs the update data in accordance with the 



electronic data output by said/electronic data output means. 

adcon 



18. The system according to claim 16, wherein said data input means also inputs 
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recording log of input or uj 



verification information representing/who inputs the electronic data, 

said update data input me^iis also inputs verification information representing who 
inputs the update data, 

said electronic^data recording means associates the verification information 
representing \^ho inputs the electronic data or the update data with the input electronic 
data or updated electronic data before recording the electronic data. 

A method of managing electronic data which is applicable to a system 
comprising an electronic dz ta record file for recording electronic data, and a log file for 

idate of the electronic data to be recorded on the electronic 
data record file, said method comprising: 

inputting the electronic data to be recorded on the electronic data record file; 
storing log of the input electronic data in the log file; 
recording the input! electronic data on the electronic data record file; 
discriminating whether a detachable recording medium is certified one or not when 
said recording medium ^is applied to said system; 

discriminating whether a certified operator operates said system or not; 
permitting input of update data for updating the electronic data recorded on the 
electronic data record! file when the recording medium and the operator are certified; 
inputting the update data after the permission; 

updating the ejectronic data in the electronic data record file in accordance with the 
input update data; and 

storing log on the input update data in the log file. 

20. The method according to claim 19, wherein said permitting the update data 
input outputs the log of the input electronic data stored in the log file, and 

the update aata are input in accordance with the output electronic data. 

21. The method according to claim 19 comprising encrypting log of the input 
electronic data gtad the update data when storing the log of the input electronic data or the 
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log of the input upch te data in the log file. 

22. The method according to claim 21 comprising decoding the log of the input 
electronic stored in the log file when the recording medium and the operator are certified, 
and outputting the deqoded log data. 

The method according to claim 19, wherein said inputting the electronic data 
nputs verification information representing who input the'electronic data, 
said inputting the update data also inputs verification>mformation representing who 



inputs the update data, 

said recording the electronic data on the electronic data record file associates the 
verification information representing who inputs/the electronic data with the electronic 
data before recording the electronic data on tWe electronic data record file, and 

said recording the update data on tho'electronic data file associates the verification 
information representing who inputs the update data before recording the update data on 
the electronic data record file. 

24. The method according to claim 19, wherein said discriminating the certified 
operator compares data representing physical characteristics of an operator with 
previously stored data representing physical characteristics of the certified operator. 

25. The method according to claim 19, wherein said recording the electronic data 
on the electronic dgfta record file records the electronic data immediately after said 
inputting the electronic data inputs the electronic data. 

26. 5Tie method according to claim 19, wherein said recording the electronic data 
records Ufe electronic data on the electronic data record file when said discriminations 
certify said recording medium and the operator. 

A computer readable recording^ile^um storing a program which causes a 
computer system comprising an electronic data record file for recording electronic data 
and a log file for storing log of inpijt'or updated electronic data to be recorded on the 
electronic data record file, said/program comprising the steps of: 
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recording the input 



permitting input of 
electronic data record fi 




inputting the electronic data to be recorded on the electronic data record file; 
storing log of the input electronic data in the log file; 

electronic data on the electronic data record file; 
discriminating whether a detachable recording medium is certified one or not when 
said recording medium is applied to said system; 

discriminating whe ther a certified operator operates said system or not; 

update data for updating the electronic data recorded on the 
e when the recording medium and the operator are certified; 
inputting the update data after the permission; 

updating the electionic data in the electronic data record file in accordance with the 
input update data; and 

storing log of the nput update data in the log file. 

The recording medium acconling to claim 27, wherein said electronic data 
step also inputs verification inforaiation representing who inputs the electronic data; 
said update data input step a]/o inputs verification information representing who 
inputs the update data; 

said electronic data recording step associates the electronic data with the verification 
information representii^g who inputs the electronic data before recording the electronic 
data on the electronic data record file; and 

said update .data recording step associates the update data with the verification 
information representing who inputs the update data before recording the update data on 
the electronic data record file. 

V. A program data signakbeing embeded in a carrier wave, which represents a 



program for causing a computer system comprising an electronic data record file for 
recording electronic-data and a log file for recording input or update log of the electronic 
data to be recorded on the electronic data record file, said program data signal 



comprising: 
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a segment for inputting the electronic data to be recorded pn the electronic data 
record file; 

a segment for recording log of the input electromcf data on the log file; 

a segment for recording the input electronic data on the electronic data record file; 

a segment for discriminating whether a detachable recording medium is certified 
one or not when said recording medium is'applied to said computer system; 

a segment for discriminating whether an operator is a certified operator or not; 

a segment for permitting input of update data for updating the electronic data 
recorded on the electronic daja record file when said recording medium and the operator 
are certified; 

a segment for inputting the update data when the update data input is permitted; 
a segment fdiMjpdating the electronic data recorded on the electronic data record file 
in accordance with the input update data; and 

a segment for storing log of the input update data in the log file. 

ram data signal according to claim 29, wherein said electronic data 



iput ^^ent^so inputs verificajfton information representing who inputs the electronic 
data, 

sgad update data input segment also inputs verification information representing who 
inputs the update data, 

said electronic data recording segment associates the verification information 
representing who inputs the electronic data with the electronic data before recording the 
electronic data on the electronic data record file, and 

said update data recording segment associates the verification information 
representing who inputs the update data before recording the update data on the electronic 
data record file. 



